Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		13.04.2006
Source:
SecurityVulns ID:		6004
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		JELSOFT : vBulletin 3.5
		CLANSYS : Clansys 1.1
		PLONE : Plone 2.0
		AWEB : Aweb's Banner Generator 3.0
		SPHIDER : Sphider 1.3
		PHP121 : PHP121 Instant Messenger 1.4
		QLITENEWS : qliteNews 2005.07.01

Original document		dr.jr7_(at)_hotmail.com, Remote File Inclusion in VBulletin ImpEx (13.04.2006)
		Aliaksandr Hartsuyeu, [eVuln] qliteNews SQL Injection Vulnerability (13.04.2006)
		stormhacker_(at)_hotmail.com, SimpleBBS v1.1(posts.php) remote command execution (13.04.2006)
		stormhacker_(at)_hotmail.com, SimpleBBS v1.1(posts.php) remote command execution (13.04.2006)
		soot hackers, PatroNet CMS Xss Vuln (13.04.2006)
		soot hackers, Clansys Multiple Xss Vulnerabilities (13.04.2006)
		SECUNIA, [SA19621] Aweb's Banner Generator "banner" Cross-Site Scripting (13.04.2006)
		SECUNIA, [SA19633] Plone "member_id" Parameter Portrait Manipulation Vulnerability (13.04.2006)
		codexploder_(at)_linuxmail.org, Tьmer Bilişim File İnclusion (13.04.2006)

Files:		Exploits Sphider <= 1.3 arbitrary remote inclusion
		PHP121 Instant Messenger <= 1.4 $_SESSION[sess_username] remote cmmnds xctn
Discuss:		Read or add your comments to this news (0 comments)